#10035 Clean-up and rename "IRC Nicknames" field in Fedora Account system
Opened 3 months ago by bookwar. Modified 3 months ago

Given the news (https://www.devever.net/~hl/freenode_suicide) the information stored in the "IRC Nicknames" field is no longer relevant.

I think we should clean the data in that field, rename it to "Libera IRC Nicknames" and ask community to fill it again with new data.


I agree. There's no benefit to keeping this information and it can only cause confusion.

We'll want to communicate that this is happening before and after. If it's reasonable to be able to directly email people who have the field set, that'd be a great addition.

I'm not sure I understand. People also have nicknames on Libera's servers, and it's likely they'll register the same nick, no? I don't think Freenode is explicitely mentionned in the app.

Metadata Update from @abompard:
- Issue tagged with: authentication

3 months ago

People also have nicknames on Libera's servers, and it's likely they'll register the same nick, no?

In many cases, yes. Some people were not able to get their old nick on Libera. And others may have never registered a nick on Libera.

In the current state we can not differentiate between the state when someone registered at Libera and configured their nick in FAS or someone used Freenode long time ago and has outdated information in their FAS account.

This creates a risk that someone will take over the old nick at freenode, and will use it to impersonate some Fedora users.

1) By resetting that field we ensure that we don't have any outdated information.
2) By adding Libera Chat explicitly in the name we highlight that we only work with Libera Chat network and eliminate confusion.


Optionally we can replace one IRC nicknames entry with a list of pairs: "IRC network: Nicknames" This would allow people to specify multiple contacts, for example oftc.net network. But it may require more work. And also it is not really necessary for FAS, as we have just one official network. And we don't have that much of an interest in other account details.

See also https://github.com/fedora-infra/fmn/issues/321 for a suggestion on reclaiming a nick. Right now I cannot claim my Libera nick because someone else seems to have registered esm under Freenode.

Metadata Update from @mohanboddu:
- Issue priority set to: Waiting on Assignee (was: Needs Review)
- Issue tagged with: medium-gain, medium-trouble, ops

3 months ago

May I encourage you to set the priority of this to URGENT? Or at least, to make it ultra-urgent to wipe the entire nick database?

Right now you are spamming Libera users. Some of those know what's going on (me, getting what esm@Freenode subscribed to). Some of those may be innocent bystanders: joebob@Freenode may have subscribed to a set of notifications, which joebob@Libera (no relation) is now receiving and has no possible way to silence.

There's some various issues being conflated here, let me inject with some more info.

Our account system has a 'IRC Nicknames' field. We should definitely say this is for our preferred network at least.

Like the account system before it, this is a free form field. You can put whatever string you want into it. There's no verification, nor do they need to be unique.

The "IRC Nicknames" field is only used for users looking up that information currently.

zodbot looks up this information to hand out irc cookies, however, currently zodbot is still looking at the OLD account system, so it is getting this from the old irc nick field which is read-only.

There's a second place we use irc nicks, and thats FMN. A user can add any number of IRC nicks and they will get notifications to those irc nicks. This setup IS validated. You add a nick and then it messages you to confirm that you are you. However, (as noted above) these nick mappings were all validated before on freenode. (well, any of them done before we moved).

I think we should:

  • See if there is a way to wipe all the irc FMN accounts and send an announcement asking people to re-validate their libera.chat irc connections.
  • Change the accounts/noggin interface to at least say it's for libera.chat.
  • See if there's a way to implement validation for irc accounts in noggin (I guess it would need noggin to have a irc connection, message nicks and ask for a reply to verify)

I'm not sure clearing the irc field in the account system for everyone is that useful. Since anyone can already put anything they like in it...

Hope that clarifies things a bit?

Right now you are spamming Libera users. Some of those know what's going on (me, getting what esm@Freenode subscribed to). Some of those may be innocent bystanders: joebob@Freenode may have subscribed to a set of notifications, which joebob@Libera (no relation) is now receiving and has no possible way to silence.

FWIW, I have cleared the 'esm' irc notification pref... so you should no longer be getting spammed. Of course that doesn't help others...

@kevin Thanks for providing more details

See if there is a way to wipe all the irc FMN accounts and send an announcement asking people to re-validate their libera.chat irc connections.

+1

Change the accounts/noggin interface to at least say it's for libera.chat.

+1, but I still think that reset of that field is required. Even though it is defined manually, it could be defined years ago. And for years this field meant Freenode. So we can not expect this data to be valid today. It needs to be reviewed and re-entered by the owner of the FAS account.

If you don't want to lose the info there (for historical reasons maybe), lets mark the current field as "old and outdated irc nicknames", and then add field "Libera Chat Nickname" as a separate entry.

See if there's a way to implement validation for irc accounts in noggin (I guess it would need noggin to have a irc connection, message nicks and ask for a reply to verify)

It is a nice feature but I don't think it is required. Manually checking that IRC nick maps to fedora user is easy as you can just ask a person over IRC. It is the opposite direction, from FAS to IRC, which is hard to validate and which we need to re-verify.

Personally I have no problem with clearing it all. I don't think we need to add fields to the schema for something which is basically going to be used by zodbot to confirm if you are the person it should give karma to or for meeting administration and other items.

Login to comment on this ticket.

Metadata
Boards 1
ops Status: Backlog